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I. REFERENCE TO REPLY UNDER 37 C.F.R. $1.116 

Applicant has submitted a detailed reply on 01/17/2006 to the Examiner's Final Rejection 
mailed on 1 0/25/2006, requesting reconsideration of the final rejection. Applicant will refer to this 
paper as the Reply from 01/1 7/2006 in this paper. Applicant will refer to the previously submitted 
paper in response to the Examiner's Office Action from 06/28/2005 as the Reply from 08/1 9/2005. 

II. REGARDING THE EXAMINER'S ADVISORY ACTION 

Applicant respectfially asserts that the Examiner has not properly relied upon factual subject 
matter in construing the Final Rejection and has consistently squelched, absent justification or 
reasoning, Applicant's detailed clarification of the subject matter cited in the primary and secondary 
references. The deficiency in the standard for examination in this appHcation to date is evidenced 
by the Examiner's unwillingness or inability to either fiirther elaborate on the grounds of the present 
rejections (as Applicant has attempted in good faith for advancing prosecution), or to provide 
counterarguments to Applicant's specific rebuttals which Applicant has supported with factual 
information. Instead the Examiner has merely repeated the same cursory, inaccurate grounds for 
rejection since the first Office Action and has given no indication of having taken the time and effort 
to actually understand the underlying subject matter pertinent to the present claims. The following 
remarks elaborate on the clear deficiencies in the Examiner's prima facie case in support of the 
rejection. 

One fimdamental issue in regard to independent claims 1,10, and 1 9 relates in particular to 
the latter two method steps, as represented by claim 1 : 

1. A method for preventing a hacker from performing unwanted 
activities in a computer system comprising the steps of: 

receiving a request to provide a service from a user; 

determining if said request was transmitted from a user space or a 
kernel space of a memory space of said computer system, wherein if said 
request was transmitted from said user space then said user is an 
unauthenticated user; and 
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determining if said request from said unauthenticated user fails to satisfy a 
security requirement for unauthenticated requests, wherein if said request 
from said unauthenticated user fails to satisfy said security requirement for 
unauthenticated requests then said request is not serviced. 

Applicant notes that the emphasized claim limitations provide for two distinct and logically ordered, 
i.e., successive, method steps. 

Regarding the method step of "determining if said request was transmitted from a user space 
or a kernel space. . the Examiner has provided no further elaboration of the rejection other than 
maintaining that Figures 5 A and 5B of Ogawa meet this claim limitation. Applicant has provided 
detailed factual arguments that explain why Ogawa does not meet this claim limitation. See Reply 
from 08/19/2005, p. 9, lines 1-21; Reply from 01 /1 7/2006, p. 3, lines 1-17. Applicant reiterates that 
simply accepting a request from a user process (i.e., in user space), as disclosed in Ogawa, does not 
anticipate or suggest " determining if said request was transmitted from a user space or a kemel 
space. ..." The claim limitation clearly requires a determination, i.e., a decision-making step , that is 
not present in Ogawa, If such a determination step were present in Ogawa, then it would require a 
corresponding decision element in Figure 4, which describes the process in Figures 5 A and 5B of 
Ogawa, Further, the determination step suggesting this claim limitation would necessarily require 
the receipt of requests from kemel space and from user space , in order to make the determination. 
However, there is no teaching or suggestion of such a decision-making step in Ogawa, and Ogawa 
exclusively teaches receiving requests from a user space. The only decision-making steps in Figure 
4 of Ogawa pertain to if the list is empty or if an element in the list is unprocessed. Neither has the 
Examiner been willing or able to provide any further factual elaboration why or how or what feature 
of Figures 5 A and 5B in Ogawa meet the claim limitation of "determining if said request was 
transmitted from a user space or a kemel space. ..." 

Further regarding the method step of" determining if said request from said unauthenticated 
user fails to satisfy a security requirement . . .," the Examiner maintains that ''Ogawa teaches that 
requests are analyzed and are not processed if they do not match the request list (see Fig. 5 and 9)." 
Applicant respectfully disagrees and maintains that there is no factual basis in Ogawa supporting 
the Examiner's statement. Applicant has previously provided detailed arguments why Figures 5 and 
9 in Ogawa do not contain the subject matter asserted by the Examiner. See Reply from 
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08/19/2005, p. 9, line 22 to p. 10, line 3; Reply from 01/17/2006, p. 3, lines 1-17. There is no such 
determination step, comparing a request to a security requirement, in Ogawa, and all determination 
steps in Ogawa fail to meet or suggest this step. There is no mention in Ogawa of analyzing 
requests, and not processing requests if they do not match the request list. There is no mention in 
Ogawa of a security requirement. As a simple text search of Ogawa reveals, there is no single 
mention in Ogawa of the terms 'security*, *analyz[e]\ 'analysis*. Neither has the Examiner been 
willing or able to provide any further elaboration why or how or what feature of Figures 5 and 9 in 
Ogawa meet the claim limitation of "determining if said request from said unauthenticated user fails 
to satisfy a security requirement 

Further regarding claim 1 9, there is simply no factual support in Ogawa for the Examiner's 
citation that "The request is not processed (see Fig. 2) and kernel is notified based on the invalid 
value (see Fig. 5)." In Figure 2, the management of the request list is shown with the states 
"COMPLETED", "BEING PROCESSED", "UNPROCESSED" for the successive elements in the 
list. Clearly 'unprocessed' in this context means not yet processed, and does not teach or suggest 
'not processing' a request in terms of denial of a request. A simple text search of Ogawa reveals that 
there is no single instance in Ogawa of the terms 'not processed' or 'invalid'. 

As a result of the foregoing, Applicant respectfully asserts that the Examiner is misstating 
the factual subject matter in Ogawa and that the Examiner's rejection is in error. 

Further in regard to the Examiner's usage of the term "user kernel," Applicant respectfully 
disagrees with the Examiner's reasoning in item 3. of the Advisory Action that "user kernel" is 
mentioned in the specification. Instead of providing an elaboration or meaningful justification of 
why this term has been construed in the rejection (and what this term actually means in relation to 
the present subject matter), the Examiner maintains that since "user space" and "kernel space" are 
separately mentioned, that a new term "user kemel" can be considered a part of the specification. 

Regarding the motivation to combine Ogawa with Willman, Applicant reiterates previous 
arguments which illuminate factual deficiencies in the Examiner's reasoning. See Reply from 
08/19/2005, p. 11, line 15 to p. 12, line 16. 
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III. CONCLUSION 

For the reasons stated in AppUcant's Reply from 01/17/2006 and noted above, Applicant 
respectfully asserts that the rejections of claims 1-27 are in error. Applicant requests a pre-appeal 
review conference be held to reconsider the Final Rejection. Applicant respectfully requests 
reversal of the rejections and allowance of claims 1-27. 



Respectfully submitted, 



WINSTEAD SECHREST & MINICK P.C. 



Attomeys for Appellant 



Date: March 13,2006 
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